{"report_id":"e32ed7d2-f0a2-4701-9d63-de105aef5b3e","version":6,"status":"done","tags":[],"date":"2026-02-22T15:30:37Z","url":{"schema":"https","addr":"bazienfj5285328.xyz/","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bazienfj5285328.xyz/","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"title":"Bazienfejar (بازی انفجار وی آی پی) - بهترین سایت بازی انفجار آنلاین","dom":{"size":37871,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2725), with CRLF, LF line terminators","md5":"edd25484b46406d186a803e951ad6b06","sha1":"37c81fad3919aa4b8e3462a313d5a76dbe825b99","sha256":"5301aa6f7b7c2a50494d0ed41d24f14dcd0b567d2add8a35555bb6f8794e918d","sha512":"1a1d32536c594a4d6679e2ea07793294cc9ad19d122046139832af480c36682d9283d6d5dec7bdd256350c7f526d3fb1c0532ebcd2d29f9cf42a9ee0f0295770","ssdeep":"768:o/gFsclQeRqIGmsCBhdcXFh0/cQd76q0wRRJ74/4qDJ/JsJmJsJgJ3MAXDC5qYcR:oIzRqIGmsCB53tl4/4qDpK8KakeRJv","tlshash":"7b03f921c509101762338a46b7227b2cd67b6927d7028cb972f42364ffe7f588961fad","dom_hash":"domhash0bf117c9ec10074491291fc9c7e451ce","first_seen":"2026-02-22T15:30:46.816459Z","last_seen":"2026-02-22T15:30:46.816459Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bazienfj5285328.xyz/","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-29T15:30:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":1378,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":1,"received_data":313980,"sent_data":646,"comment":"","tags":null,"fingerprints":null},{"fqdn":"githob.co","ip":{"addr":"172.67.211.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-05","domain_rank":420154,"first_seen":"2021-11-30T12:53:43Z","last_seen":"2025-11-22T21:21:23.146397Z","alert_count":0,"request_count":3,"received_data":44310,"sent_data":1341,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bazienfj5285328.xyz","ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-02-22T15:30:40.131856Z","last_seen":"2026-02-22T15:30:40.131856Z","alert_count":0,"request_count":40,"received_data":1887225,"sent_data":22410,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-15T22:20:44.607116Z","alert_count":0,"request_count":2,"received_data":801957,"sent_data":895,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.info","ip":{"addr":"172.67.172.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-18","domain_rank":1899942,"first_seen":"2015-09-20T15:25:48Z","last_seen":"2025-09-02T22:08:26.250466Z","alert_count":0,"request_count":6,"received_data":609598,"sent_data":2628,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/js/jquery.inputmask.bundle.js","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9865c319fde473346df585c12be158d","sha1":"792ab2af9732ee8b03325916c6650cff11dfa277","sha256":"bc9d17d9ba9b5a874ca6f60e16b99edbaf2f979f524e2ec9a4cd881f34f961a3","sha512":"c02a42fb583c188492efdb18ba6308d989eedec60721124de3e2b5f472b9732474f993ec24cdf6b43c68638989361230025f04a4ede2a0c38374e52ec0e6d7d4","ssdeep":"768:xlas14j4I5q4n6zkVDFpGFUvji2gVl2wxay0sxix4NOQf9S:ys14j/qjoVBWUvji2oAwxzZEx4/9S","tlshash":"fc632b95395172725be360f802ef840ab27e9b1d74dd8180f499f0e03839d9a47b7f6a","size":72900,"data":"","first_seen":"2023-03-07T13:02:28Z","last_seen":"2026-08-14T18:29:18.13393Z","times_seen":413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/plugin/sweetalert2/sweetalert2.min.js","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fd5c368c8406faa9dd1749b4f8de452","sha1":"70f3824c6b735191d96c6d2b68779d9b4e2497a1","sha256":"26822d1a5bd122462c9e53d0dbe9b521061875e9d96becae92d1860c4f6e0e0f","sha512":"da965f00f93dd408230b481662bd85d7d31b65f3fa5c019efde15b3a2b0e413ba95e2aa672d0d8ff70477e3e987d67ba9fa3492e2a827a15b57837a94f0f253c","ssdeep":"384:mZEYKzC+V3uNwF1bR3rfBFty6Rt9jK13aeWnNTGvnTniFhw7mvFni09H/79/QiYb:hYG39rc6Rt9w84v7idVLJ7YIVGTuORu2","tlshash":"22a209943554743706a794ba69ff114bf632249cb80a4930b12cc5a47ebcc859b73ffa","size":21500,"data":"","first_seen":"2023-03-07T13:02:28Z","last_seen":"2026-08-14T18:29:18.166587Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73000a9282cbaea6fbde774826dbbcbb","sha1":"05057d10328765ac12ae958a74acb911a19035c7","sha256":"541c47bd9be732d2b50ada54b014c6718777a2ee05b31882fdb1feb135c84929","sha512":"0e900602835274ec0a627ef5df0ce7341d1994deabff33614283d33eeeaae1e25ed54cef6e669a58762cea9d7122db62438b4af4c73950349a50ae7725a4675b","ssdeep":"","tlshash":"20e08c5e1bdc10422081297902ae3f35705662b7fc28b8693369fcb17ffc04f841155a","size":345,"data":"","first_seen":"2023-03-07T13:02:28Z","last_seen":"2026-06-06T19:05:30.588543Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/js/jquery.js","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4162c9d7e520a5de05001be6e741899","sha1":"0baf29230047c9cd896f14c59618c9948ea79451","sha256":"2405bdf4c255a4904671bcc4b97938033d39b3f5f20dd068985a8d94cde273e2","sha512":"b2e52d48f92a62615de4bb37d0dcfa6e30d7f9309c7c4ce115faa38a37dd820b1a159a3296f4e3fb6a1d073b21b344c2c18ad866141e0a01e024492771bd9855","ssdeep":"1536:+NhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4cAj2ll/ckaXEy6n15HZ+FhFcQDs:Axc2yjxAj2QA/kcQDU8Cuu","tlshash":"f883e6d9b2c670629b7730b850bf410bb17a98dab44c8c60f158d9d47db8a8d907bf2c","size":86596,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-08-19T19:21:00.868909Z","times_seen":2649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/default/assets/js/data2.js?1000.060","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70c600577d9d42b142e5a71a9298ba38","sha1":"4a93e236ea6f2e99f9c67e56b7f977ad179e2964","sha256":"7493040ffe692262f0414d0940cf784dd513f2a625a9bc92879d4c0a0d406def","sha512":"66a5bc1e9030d71a7f009b95dd795bfffb18aabbca5a5cc990772b6c051443f3a0c78833ef593bcd44237d4a9dede9f624154a18c37f5edea7c6c6783ecaedf2","ssdeep":"768:DX+HhKQw+Yu0WL7ohO41s1KLmuu1uyHwUNtAiG7UJPMlG/:DXqxw+2WkIu3yQUWE","tlshash":"eb339588fb6c181941bd321c866f62dd5fbc967786040c7bfc78de5848d0a79226ed3a","size":50154,"data":"","first_seen":"2024-06-14T07:40:21Z","last_seen":"2026-08-14T18:29:18.112206Z","times_seen":297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d51ebccb4a781999304cfee98506e40a","sha1":"24d39497f33870f399c12914be3f2199c6ea9a10","sha256":"fac91803c5eb29ff4dcae14eb74903b2ee3b4b0e06318403a73f978815bb4b3c","sha512":"1425116d6003fbda13cbc04ee9840597f909a14041c11c1a99a5f341f3aba5e5f9864abb514f3bac1509a2de7bb551f156e346d87a7ef33ef870c9f6453e4896","ssdeep":"","tlshash":"d241323c4a3e1f5c942d190bf98dad458e803c0bf9722c64c2f973a475863996fc14ad","size":1883,"data":"","first_seen":"2024-12-23T13:39:31.659273Z","last_seen":"2026-05-29T22:24:51.700633Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c45fa0e1c81184553386b595ab180d4","sha1":"4aff0fc62b661b3063d116432e7ecb20f16e0d4f","sha256":"b194ddf32163db5d3d51c3a8db7210a64be95d44fe70134485dbe382b18bbefb","sha512":"d380c0340097f16a9d9f93de9fa8ea2491ef9507df675ac3c48aadf1aa464cbd6c1bd51209dc3e5392027bac3bcc52a5628175321f416e6ff19ddc00841bdd23","ssdeep":"","tlshash":"50e01286a469150439d215365d4f3220306b21eb0888a4126f14df50be397efc697baa","size":358,"data":"","first_seen":"2024-08-19T21:02:23.705337Z","last_seen":"2026-02-22T18:47:04.978249Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/js/bet.js?1000.700","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7061b268c95f9c181e7c31b47260e043","sha1":"39ab45d0f7ab2b653c7df14263868d7ea2c710b9","sha256":"348943c0e3027588b1617f41d38b3938b899caa51645669cbae925ea617c5d9c","sha512":"7b7c54e6aca0331e60cceffb86a5b755fd203fce4bda6e4d76752151b22ad54eb8ddb2ae204cdd000d91c9d1e79a6d384f765ba6601a649bfecb1b38b144271b","ssdeep":"192:f/LtmhZLPm8Znk7sHbn7i//3Kpbyax9FeSYmCOT9Ks/CoPN0LOc9HwE3:q5lXqMPFCmH4RoO99Hp","tlshash":"23526344fbac2829c1b122ee6c6d10cea57ce833e0659de6fc79d4646bc0e194365e37","size":14093,"data":"","first_seen":"2023-03-08T06:44:38Z","last_seen":"2026-08-14T18:29:18.103188Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bf6b461148a3d176128fd50094d6b1f","sha1":"984c7368e0a8dd7601afef3d8b4415ad6671c59c","sha256":"977e63299d98f831e072d63d06a3296d38d568cb898f5f3a02c37fbcb6b63872","sha512":"df61b2f6736349488587ca8962ad245fb8bdfcd0ba65231c427c5671052b09aa5764387f7d1cd3b9511d5e234f325147d5753fc664e22219b29eefa8ab892ea2","ssdeep":"","tlshash":"7fe0c0dab811087274d905b523b1a1187183150878091c22cdfdc91478185874c124cc","size":342,"data":"","first_seen":"2026-02-22T15:30:46.872586Z","last_seen":"2026-02-22T18:47:04.979772Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"githob.co/api/sites/6/script.js?v=1","fqdn":"githob.co","domain":"githob.co","tld":"co"},"ip":{"addr":"172.67.211.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccd607d090590aee216c7a0f45d90257","sha1":"00bcf1ffa9680b221f99b31e34f770a7c2a5188c","sha256":"54e0070e58f8af4c091d8dc9686eebca9e7663ebf7000025f46a65fde43cf329","sha512":"57dcb724fe3fdde45aea77711764b567a9fc9a133446630ed3d3b793e5bd4678a005bb645778b30c0e02dcc92c99b494df22aef10513c8651f6acda47b0262c1","ssdeep":"768:WPz4drMw4yeT3o3RyonUQxX/yWOXf8xov8xmbdUgV4p2ylPmtbyMk+:O13o3RtnU0X/yNXf8ev8cbdUgmp2ylPG","tlshash":"ddc284827620053557df086f30b7b68cfb75558afd946840a8aec82d60f1ed250a7bbe","size":26353,"data":"","first_seen":"2026-02-22T15:30:46.866515Z","last_seen":"2026-02-22T18:47:04.949415Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-N5P4VCNB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fab0d5b743050971f552cb0e2c4f600","sha1":"2104445ac12fde5428266d77a6a7dec08c65d312","sha256":"6a1aadb7a9c2c4ce3b44d337a827983f21a916956a9627f86cc9f6cd8fe44da3","sha512":"861f785a62ee98b4e13021524ecdcf61eadf39cfc7eb387d6dfba3e28740e21d55bbb5824a4b16c03147851d50d8c735ed0e7a3deb5a32e00c17291949fced64","ssdeep":"6144:r4D83xaAJljxXU18kKDeDKJN5hSppv/UalWy:Mw3xaixk18CD/U6","tlshash":"9d7417cdb3d6742693a2a478403f118bb17b69a2f84cc895f186dcd42d709aa4237f7d","size":345835,"data":"","first_seen":"2026-02-22T15:30:46.842342Z","last_seen":"2026-02-22T15:30:46.842342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-D7M6MS479K\u0026cx=c\u0026gtm=4e62i1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a743e9ce83ed7a11c147c7253ee13d2d","sha1":"678428a68ef9ca224f8d5a7af155beaf489cd67c","sha256":"91319e60d6a72427ede1582a5dafe27fde809758bfdee8372007331f9dbb5855","sha512":"51b6550f3ebca2c9e19e17304068c2ed581e55bab66b61a9a87580879c21cc3b3b561e5de1a45bb34589a427523d8136c326c9441e3c7b001cd3a580e947114a","ssdeep":"6144:3wW4D85YxaWJljxXUJ78kKUeDKJN5hSppR/UPEnQ/JYY:38w5YxacxkJ78ZN/Un","tlshash":"08a41ace73d670269396e478503f018ba57b69a2f44cc89af189cce42d7499a4237f7c","size":454888,"data":"","first_seen":"2026-02-22T15:30:46.820219Z","last_seen":"2026-02-22T15:30:46.820219Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/js/script.js?1000.126","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c16aa2b506f77a63aab0b5d86c929b6d","sha1":"56f483d24b1ad414f2799abb8d24d54b4a276b60","sha256":"a565c37ce9a4009fc867bf41c1e4f69188d383db6c6b864ea5c2b3250838fe89","sha512":"d6d6c4146307125c2880d92285dc642ac2a9612758e3def16b1f16f872193b9b984876627c650d809cdd4a0c01044f2213a93bad871980f2cf3231ff0d80c2a9","ssdeep":"192:b52O2GsN+C++3U+dpG3CM3C++nTGsNzSQPxJGsNIQ:bkA+2Jl+nTG8zG5Q","tlshash":"73f16384f7dc392543753ba9db6f01c951b88402eb885c67ec6c95f46ed2b3800b6e3a","size":7721,"data":"","first_seen":"2024-06-02T06:41:04Z","last_seen":"2026-08-14T18:29:18.123584Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e035ba212ce9183568e5513b108e93ae","sha1":"fcf257eda6e0e91aa6947a61df394361712b7a16","sha256":"b2af3c915ae312c1182b5373e23e17cb6c12629136ed792ee1f1f68592b4093a","sha512":"116c1f15db3edc691a84de0f67781f370c971b8b63679626e14037ae47786dd398ded0577d46e942c07f7df8f426affb9b787c6bf0dfb85b9b398db25ad99555","ssdeep":"","tlshash":"48114ce09b4d342586350348a85f10c916fca472d049cdf5fe71eaa3e5813994175d27","size":878,"data":"","first_seen":"2023-10-13T04:26:45Z","last_seen":"2026-05-30T13:04:33.926496Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/fonts/font-awesome.min.css","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/fonts/font-awesome.min.css HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/candy/assets/css/default.style.rtl.css?1000.016\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"59bed4d0-792a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaChVBc6jgQ2q%2FrFto40rFjL4EBTdkCzGATRCY%2FFuQuzfwPVzj8MU5Fr7MRyzloBGm7QiRaypBBRFmgBLka8EEiTaoyoqw1tM7oilg33%2FEQ3DL4%3D\"}]}\r\ncf-ray: 9d1f859d7fc89a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":31018,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30855)","md5":"ea73841d69eba2052d963ae120f9e52c","sha1":"e7313b94aba40951538602c0ceea7b30b8d4ef01","sha256":"00fbb0eae287d8a29b681bd18fda28c8ace31c66a3cb61c35200dca7821ed499","sha512":"78150b0680a331bf3457f9ca56d363500bd5b43d886f07ef95267da9271700640f0e720fd19f039edd9facd6b5af316bf65214b61ec1f60fbc9dedca220322e2","ssdeep":"384:gHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:gwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"9ed242e8e54c01d66731c48bff81b36862b6fb3dc5854da9f01f290c29d226562c5fba","first_seen":"2023-04-07T02:32:48Z","last_seen":"2026-08-14T18:29:18.156818Z","times_seen":410,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-22T15:29:56.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 15:29:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, must-revalidate\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nset-cookie: lstvs=1771860596; expires=Mon, 23-Feb-2026 15:29:56 GMT; Max-Age=86400; path=/\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4wuTsXswDGtWfws%2BeTx8rFgRkbSRu5FSmCPY3yIcTVTM4y4TYLXNxAKyynWNOBZsOpybI%2BEUxG5vzxH44yHCIeFSlmolyYbUZllySAwiGXfSQk%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d1f859a89a451e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":17049,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1689)","md5":"b78d7b3e538d7d20480c6283a6532bb7","sha1":"eda95f9cb610e23f975d725ba50cebf29abe9290","sha256":"1508db199162e14cac009344c3b32e03a5d4edb24aeac972238a512f411696bb","sha512":"d93074dfa5af5856789b87dfb021efd50919889b7f658822a9cd864dd719294155002e5feceaa378d238f71a917cdf1af954a984586b6bbf88d7c5390c7542c6","ssdeep":"384:aLgImc4+TJqAkmTRqIGmsCBhdcXFh0/cQdW4pnLfOmZKe7Zgtzb9SXDC5qYGLNVE:aLgImclQeRqIGmsCBhdcXFh0/cQdWALC","tlshash":"a972a6214a9d452a11220643f02a792da5bfbc37e6119d70b1fa53b4ffc1f86cd2257e","first_seen":"2026-02-22T15:30:46.818814Z","last_seen":"2026-02-22T18:47:04.93174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":88,"dns":58,"connect":9,"send":0,"wait":84,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-D7M6MS479K\u0026cx=c\u0026gtm=4e62i1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-D7M6MS479K\u0026cx=c\u0026gtm=4e62i1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\nexpires: Sun, 22 Feb 2026 15:29:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150855\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"a743e9ce83ed7a11c147c7253ee13d2d","sha1":"678428a68ef9ca224f8d5a7af155beaf489cd67c","sha256":"91319e60d6a72427ede1582a5dafe27fde809758bfdee8372007331f9dbb5855","sha512":"51b6550f3ebca2c9e19e17304068c2ed581e55bab66b61a9a87580879c21cc3b3b561e5de1a45bb34589a427523d8136c326c9441e3c7b001cd3a580e947114a","ssdeep":"6144:3wW4D85YxaWJljxXUJ78kKUeDKJN5hSppR/UPEnQ/JYY:38w5YxacxkJ78ZN/Un","tlshash":"08a41ace73d670269396e478503f018ba57b69a2f44cc89af189cce42d7499a4237f7c","first_seen":"2026-02-22T15:30:46.820219Z","last_seen":"2026-02-22T15:30:46.820219Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":61,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.info/pop/win.png","fqdn":"cdnjs.info","domain":"cdnjs.info","tld":"info"},"ip":{"addr":"172.67.172.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 23:46:22 GMT","end":"Tue, 19 May 2026 21:41:06 GMT"},"fingerprint":{"sha1":"F4:BC:63:6B:57:FF:1D:DB:35:4B:FA:40:49:97:92:1C:D1:42:8A:F5","sha256":"24:60:90:BF:D6:93:A4:65:48:97:36:2D:4E:8C:36:70:B8:9A:76:6E:43:04:34:B8:14:CA:3E:9D:F0:0A:A2:72"}}},"request":{"raw":"GET /pop/win.png HTTP/1.1\r\nHost: cdnjs.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 6935\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 16:05:46 GMT\r\nlast-modified: Tue, 14 Nov 2023 12:00:34 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \r\nage: 84249\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oidvy7fkP8m6HCROm1Qn6rslYCgg2ENi7UcC60p05gq5mXFNx%2BriYU%2BHqLIpXp9k%2BJwJpX9r6g4vvyLVE4vqjkZq%2F5H%2FYsGLPuc%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9d1f85a28a01be94-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"7f5c0e378d47114331e80f46ccbe858a","sha1":"4471a3b1acd5b4fcf306a1025f4d65114385fa82","sha256":"f69726f14a05e58a31a7d8dff8325dacd37fcc2285f7e40197f5828ce9be68e2","sha512":"8b48a792bb9d1ad3c1f5c89de99a011d76406c9ea643c29d8303a1fe23b6c0eb99fa4fe12fe33c2e2195e2a2fcc2b1cb9ca05a352d5f1dfc49e3cd6186003279","ssdeep":"192:1StWyHBxdp4t/dsf/jGgNi7C7QkItZPD6E:UtWyHzjFa1CfqBWE","tlshash":"60e19d8582089ca4cc35a88a80df89183d96cc7af562cb5b5b7005405592ff6d86a2f9","first_seen":"2023-11-16T16:47:18Z","last_seen":"2026-06-11T20:08:09.433199Z","times_seen":118,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":156,"dns":16,"connect":15,"send":0,"wait":17,"receive":25,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/default/assets/fonts/IRANSans/IRANSans-web.woff2","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /default/assets/fonts/IRANSans/IRANSans-web.woff2 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F; _ga_D7M6MS479K=GS2.1.s1771774198$o1$g0$t1771774198$j60$l0$h0; _ga=GA1.1.924633656.1771774198\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 32272\r\nlast-modified: Sun, 09 Jul 2017 18:15:10 GMT\r\netag: \"596272ae-7e10\"\r\nexpires: Mon, 22 Feb 2027 15:29:58 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwVL0qbe2iu%2F5KHd%2FAYfjIpy2iJYrHXDaZesV9bHsXNIadRAZnvf36sA7QY1BNgXkBBs5%2FkhwKh%2B5s7k7Ep6NNCJt4TXZK9hxnk9Z8%2FqUha%2BxTg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f85a429849a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":32272,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 32272, version 3.0","md5":"061879d0abf3f99af35c8ea1b78f5727","sha1":"d056cf28d5dacf5ea12894ff4f1103786bfacf47","sha256":"c068a89ef837ef5834df686b8f32a8705599f1f5fa5168ae97087b2eee31955e","sha512":"e2ca4c698347bafc82ca43325e62155549f1fd7feee6766f053ac3903032aafe2afd2784901d3216cefce2b55048847b12cc5cc98786bef2103d30f8f39acddf","ssdeep":"384:GvFCkZ8PYK7kQckOsjVRBJCaQrC2zSf9wMTsmRF9tZpk0tyrwV3yalUE5bqXnhqW:HmuT7TtPRQWDoYNe23yalz5gwRYi4","tlshash":"21e2f18f0ce95746e72e38466656b41ff0c6e8ce4b6e89744fb5db2093c302d851999c","first_seen":"2023-04-07T02:32:48Z","last_seen":"2026-08-14T18:02:44.792795Z","times_seen":295,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/icons/top-bar/sport.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/icons/top-bar/sport.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 482\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\netag: \"59bed4d0-1e2\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKfd%2BiWQxGf0k4fJftpmFLt%2FB%2BqQKsyE0Ul0ZarSNVxmDyhdht%2BddebA13%2FnlZ1cT6K6vn9mVk%2BR4og1z5eofUZECp%2FsTzCQvexZ6PzsZe3I3%2Fg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859caf919a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"49df9c8f2eb908279e20e9f999ed3839","sha1":"cafb502d466127f6ea903638c3297274d352907d","sha256":"6235b2caae65e2e526e6a57176046736638ce16a6fbb4914e17d664c348d6c64","sha512":"99c87ce7c9565231b7c9ca6cd67a005e81ea6027a790170c149d5b77374979b03349dbc6e8e437cb60fb63384865fc34ca2ff97e78380741e7645d52266ad998","ssdeep":"","tlshash":"2bf0540512098d6e96c0348743608d802b72c74701743224c83f8ebe2323aa57803067","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.106485Z","times_seen":235,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/icons/top-bar/support.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/icons/top-bar/support.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1250\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\netag: \"59bed4d0-4e2\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2Bgm%2BZvTq5OQJOL6JOyz2VqasO%2FIcVxMF22EcXk0CBeHZX8I3V1%2BF4dX0HWxKoVoCZBHnvHhU0Iqua5lKT2nyN2PSYNcQpTEOef0jmftjHm%2FRTY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859caf999a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1250,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"caff4cc7b91856c65c70226fa4780df5","sha1":"47b73eb7041237af4adc7b20eb283eb515c3b1a6","sha256":"71aaf53aad3e9a38905d73eb0a32ec2f1ad0797758dfbb12d6426604a3da17f3","sha512":"1f73b247165d36828d1143abfe01cccdafdca72f8547a6cbaf2a61ceb0a32aedecacbe5a23c3cd13cb7ba547a60d5233e60008a8e3f18fc154fe45547b966f23","ssdeep":"","tlshash":"5321e7556240843d9e09caa3d053502079c9fbe44f3f104209bd87b5594e6ea95a7467","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.119251Z","times_seen":255,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.info/pop/instagram.png","fqdn":"cdnjs.info","domain":"cdnjs.info","tld":"info"},"ip":{"addr":"172.67.172.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 23:46:22 GMT","end":"Tue, 19 May 2026 21:41:06 GMT"},"fingerprint":{"sha1":"F4:BC:63:6B:57:FF:1D:DB:35:4B:FA:40:49:97:92:1C:D1:42:8A:F5","sha256":"24:60:90:BF:D6:93:A4:65:48:97:36:2D:4E:8C:36:70:B8:9A:76:6E:43:04:34:B8:14:CA:3E:9D:F0:0A:A2:72"}}},"request":{"raw":"GET /pop/instagram.png HTTP/1.1\r\nHost: cdnjs.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 528070\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Feb 2026 18:36:42 GMT\r\nlast-modified: Tue, 14 Nov 2023 12:00:45 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \r\nage: 161592\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzDyUNrIWBrsJOPzcWaIWVE5Yrlj35O2KNjyAdDML1bCQLEB9HjBkuuhg%2B1rjnu048lIH1hv7KjfwJGDUv7JCOwie%2F4iCRkYYUI%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9d1f85a269b1be94-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit/color RGBA, non-interlaced","md5":"7974d692d9b5cdb8de15c08a4c06453b","sha1":"b8c09ba2e8a5116193b0dc515684454423d5e927","sha256":"418f2490abe8003b12d1178c25c1471f2a822995a8bac81f7935dcf796704f1b","sha512":"5516218e3bf308488e4d4e3f9c6a61acae521060fcfe720dc1faf7860460a0bf40413494266f45cb7757f9ea8094cd589cf722deb318b2097df082ff7e8027b8","ssdeep":"12288:l2rn/TdMfcrPs2KJJ/+92zXbyNRx8fYIAdnFiHzxaT7+s2Ql:Wn/TR+J/g2SNIAIAdFi4OsR","tlshash":"e1b422c98171e9194f1b98bcc033df83a58b94b2c2d61fc9c4116b5e68b4c26537eaf9","first_seen":"2023-11-16T16:47:17Z","last_seen":"2026-06-11T20:08:09.416364Z","times_seen":119,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":139,"dns":27,"connect":8,"send":0,"wait":29,"receive":58,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/default/assets/fonts/IRANSans/IRANSans-web.woff2","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /default/assets/fonts/IRANSans/IRANSans-web.woff2 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 32272\r\nlast-modified: Sun, 09 Jul 2017 18:15:10 GMT\r\netag: \"596272ae-7e10\"\r\nexpires: Mon, 22 Feb 2027 15:29:58 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIBWQDgECAfjX1XlwekXfh5JeeKaN8Q0fAJ1xYC7AtStAeL77S8UMRnpXkaFV%2FnSciafifyRG43jc1Q2RD5MHV6J0pLjjJKDkoKE4BJWwBZyuks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f85a3d9759a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32272,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 32272, version 3.0","md5":"061879d0abf3f99af35c8ea1b78f5727","sha1":"d056cf28d5dacf5ea12894ff4f1103786bfacf47","sha256":"c068a89ef837ef5834df686b8f32a8705599f1f5fa5168ae97087b2eee31955e","sha512":"e2ca4c698347bafc82ca43325e62155549f1fd7feee6766f053ac3903032aafe2afd2784901d3216cefce2b55048847b12cc5cc98786bef2103d30f8f39acddf","ssdeep":"384:GvFCkZ8PYK7kQckOsjVRBJCaQrC2zSf9wMTsmRF9tZpk0tyrwV3yalUE5bqXnhqW:HmuT7TtPRQWDoYNe23yalz5gwRYi4","tlshash":"21e2f18f0ce95746e72e38466656b41ff0c6e8ce4b6e89744fb5db2093c302d851999c","first_seen":"2023-04-07T02:32:48Z","last_seen":"2026-08-14T18:02:44.792795Z","times_seen":295,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/icons/top-bar/scores.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/icons/top-bar/scores.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1222\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\netag: \"59bed4d0-4c6\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMAHkPnPyaMj3YUoK9ETxZSHztzZH7PyxI%2BLv40Dy9sj0IIyqy%2BKSNtYac2L9BDBO1r58NrehNKVHkVGgBgzmmWnzVjnoUGX13Aee77fwmNjS6A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859caf939a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"dce5cc0bc29b0dd6aa0f95311e695236","sha1":"86a521b1932b3b7218cb5cbd8ca5ef3f1e021ee0","sha256":"7487e7f4c6de6772410ac434101089eb090998fa3629d5fce12c41275c2e2c38","sha512":"ac53e9959aab7de54167aa8404572412f651cd14484cdb4ca60b947a4788510ff4f918729208e30f0010ce49ab1118727480aecbffaa94b016b3ca3055bae004","ssdeep":"","tlshash":"f0211adc809049bc6c0dd683419341316fd939280b3f1685083d96bc190e156d55a8fb","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.11283Z","times_seen":255,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/fonts/Dubai/Dubai-Bold.woff","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/fonts/Dubai/Dubai-Bold.woff HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/candy/assets/fonts/Dubai.css\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 82952\r\nlast-modified: Fri, 21 Jul 2017 00:39:16 GMT\r\netag: \"59714d34-14408\"\r\nexpires: Mon, 22 Feb 2027 15:29:58 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WqD83NV7Bx3HvVEuJRxDqZdOeNzDe%2BdCdOn5HWrxUGa99WBIlnhyb%2FC%2BSObj4s%2BPAMrLB%2FLEuP0By%2FOQaU60enACLQEkt%2FvXPaBYoJdcXShYpIA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f85a258e89a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":82952,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 82952, version 0.0","md5":"4b115d4bb4ec46b899f451274a5fb6c7","sha1":"452f663a97b35e60f2ceb042f149b615b9094193","sha256":"4cc7320a5e33e43f32977157b3b12161177837bb02085b53c0af5873307ae4db","sha512":"647cd5743aefa10fdc08a1db654af69f70f4603ee60574def784df8920b06099e8a96167c3628bcb193d49e673be39f56a1eafca1d9741b17b1caff66fb16584","ssdeep":"1536:jyzEk2alVTF+Ne16vt/Vb/ME0uLaa475MlyU6Fy:jyzKaleUe/wUaakyMFy","tlshash":"3c83e15617e993c0747e02abedba7356294e68d0a87f8e3d15fe004c5ec924fb1ce099","first_seen":"2023-05-11T01:35:49Z","last_seen":"2026-02-22T18:47:04.934808Z","times_seen":16,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":53,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/default/assets/fonts/IRANSans/IRANSans-Light-web.woff2","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /default/assets/fonts/IRANSans/IRANSans-Light-web.woff2 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F; _ga_D7M6MS479K=GS2.1.s1771774198$o1$g0$t1771774198$j60$l0$h0; _ga=GA1.1.924633656.1771774198\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 32748\r\nlast-modified: Sun, 09 Jul 2017 18:15:03 GMT\r\netag: \"596272a7-7fec\"\r\nexpires: Mon, 22 Feb 2027 15:29:58 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IA5%2FcjjvW8%2BNnoEjIIcOOjnZoi21MMr3TtTkaSUCGq72AetXD5UfXUSClr3K89TxMVivGVBH%2BVyNHiNJnQ6o8%2Fr0%2BTpqHRf4kRey9d%2FDIpIWHts%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f85a429809a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32748,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 32748, version 3.0","md5":"deecd7b9e79a829f0addc7b477f78d66","sha1":"de1dc71b022c536c8b5a9c033a3a379232fc7416","sha256":"80eca765a7f123d944488102a14d1e9b8ece313ec8d0af525e96363ae857c585","sha512":"ffc91034d5d9eef2b8fb61fa7844901c23c0c1ac446ba91324cffc003ccfa030a71e19f760f5ab27e6c2bbdcdec1668d925b8b31de60bb9f6da1a6ae43392646","ssdeep":"384:v5DGueqs/2McauqDRhc8oosgauNcXoLBYpd+WapLHWbZfscXFV+8t0GVPO9xLHb/:hN+/2Mnvio1rSe7pLMfaBH/2sWNft+","tlshash":"d2e2f2508ff811fed0747a7cf899136f68b8de9b825b1949174a8d2081c4f468f9e747","first_seen":"2023-04-07T02:32:48Z","last_seen":"2026-08-14T18:02:44.809121Z","times_seen":305,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/js/jquery.inputmask.bundle.js","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/js/jquery.inputmask.bundle.js HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 26 Jul 2018 23:51:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"5b5a5e6c-11cc4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frKloOJ8UfFBCUnpw5YIpx9k015%2BLes%2BvDqOdj%2FNz%2B%2Bu4IpHCMkUiNHKxV6bd%2FWkPcSVAblkKzTn83WMuILe3ZbJ27Ua%2BCsxmKXyOFsrzJBGR4Q%3D\"}]}\r\ncf-ray: 9d1f859c9f899a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":72900,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65255)","md5":"b9865c319fde473346df585c12be158d","sha1":"792ab2af9732ee8b03325916c6650cff11dfa277","sha256":"bc9d17d9ba9b5a874ca6f60e16b99edbaf2f979f524e2ec9a4cd881f34f961a3","sha512":"c02a42fb583c188492efdb18ba6308d989eedec60721124de3e2b5f472b9732474f993ec24cdf6b43c68638989361230025f04a4ede2a0c38374e52ec0e6d7d4","ssdeep":"768:xlas14j4I5q4n6zkVDFpGFUvji2gVl2wxay0sxix4NOQf9S:ys14j/qjoVBWUvji2oAwxzZEx4/9S","tlshash":"fc632b95395172725be360f802ef840ab27e9b1d74dd8180f499f0e03839d9a47b7f6a","first_seen":"2023-03-07T13:02:28Z","last_seen":"2026-08-14T18:29:18.13393Z","times_seen":413,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/default/assets/js/data2.js?1000.060","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /default/assets/js/data2.js?1000.060 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 12 Jun 2024 19:49:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"6669fbb8-c3ea\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XsRoZs%2FZff0xnmtnVpgMiP%2BgRszczwPX2QvO%2FftWbQqP05lKdfwBW8Y3CG70oNs2RpHpdBgzd5gTqeTikWhJ5ZjpFHWgeV8yORVJZuRf7mnNcLM%3D\"}]}\r\ncf-ray: 9d1f859c9f8b9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":50154,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"70c600577d9d42b142e5a71a9298ba38","sha1":"4a93e236ea6f2e99f9c67e56b7f977ad179e2964","sha256":"7493040ffe692262f0414d0940cf784dd513f2a625a9bc92879d4c0a0d406def","sha512":"66a5bc1e9030d71a7f009b95dd795bfffb18aabbca5a5cc990772b6c051443f3a0c78833ef593bcd44237d4a9dede9f624154a18c37f5edea7c6c6783ecaedf2","ssdeep":"768:DX+HhKQw+Yu0WL7ohO41s1KLmuu1uyHwUNtAiG7UJPMlG/:DXqxw+2WkIu3yQUWE","tlshash":"eb339588fb6c181941bd321c866f62dd5fbc967786040c7bfc78de5848d0a79226ed3a","first_seen":"2024-06-14T07:40:21Z","last_seen":"2026-08-14T18:29:18.112206Z","times_seen":297,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjUxMi8xNzY2MzM1MzA3LTQwNzQtNzczNi5qcGdAZWU4ZGQzOTgyNzdiODhkOGExYTU4ZDNjN2U2YWY4MjY%3D","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjUxMi8xNzY2MzM1MzA3LTQwNzQtNzczNi5qcGdAZWU4ZGQzOTgyNzdiODhkOGExYTU4ZDNjN2U2YWY4MjY%3D HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/jpeg\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nexpires: Tue, 24 Mar 2026 15:29:57 GMT\r\npragma: cache\r\ncache-control: max-age=2592000\r\nvia: 1.1 google\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLZK5cKsJzKtnTpe7gNxmh99MiTzYs38Mnk1TVr5Q7vEBQYKz6Li0TuInhJTl7YpfATgKESHo0j%2Flsd4atJas231iccvcZSl%2F05xH32z64o9V68%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d1f859ea80f9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":377198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 2000x874, components 3","md5":"03971ded0119d6ff3a0376ce819534e8","sha1":"60201b92d47ffa9a8f8ef703b287806e752f22b6","sha256":"1950d9a22171ba9bf6dde79ec5f83e6552b60cb5a1d2df19d3d819f2c6edb00c","sha512":"8798d497816481b1471a511eaaa246f35d2cb3395c430e5bf5a7d8005691b63024a130acc71a7dbfd8b07e1d63bcf35c40265ffcaf7c83d30d05c529e994ade3","ssdeep":"6144:INOl4LNVtzSGnea0BTd52xypb9/Jmgwow020DXLD7R66wWCcFx6AnAPB75MCDATq:IEgNVtzNedBTd50SBf520DXLh66wncFA","tlshash":"a4842321b6fcfc78ca2c467a03b2da24f356498c08015ccd79d2e46b787aea46614f7d","first_seen":"2025-06-19T13:31:37.079274Z","last_seen":"2026-02-22T18:47:04.947632Z","times_seen":4,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjUxMi8xNzY2MzM2MDU5LTYzMTgtNDg3Mi5qcGdAMmZhNzEzZWZjMWVmYmUzNjJlOTViNmYwYzdlNDViZTQ%3D","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjUxMi8xNzY2MzM2MDU5LTYzMTgtNDg3Mi5qcGdAMmZhNzEzZWZjMWVmYmUzNjJlOTViNmYwYzdlNDViZTQ%3D HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/jpeg\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nexpires: Tue, 24 Mar 2026 15:29:57 GMT\r\npragma: cache\r\ncache-control: max-age=2592000\r\nvia: 1.1 google\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87pLhIxle91GsI1DZGcwkbShEoPPjXdo7oqAWRdYM%2BcNvfcqXhnxJM%2Bm3uUuqEH%2Ft9JqPht1Dn2qt2tsFL19PWW3RbqUEz0Hsz%2BZjI7ixZK1MPI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d1f859ea8109a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":221520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 3089x1300, components 3","md5":"8bf626ddf48babbe263a40da45058f17","sha1":"bfffa9f7c716c10b9e2b3770aa694c341447d405","sha256":"f1adb27813422ccd402db24efec478da5fd36606fe3e02646040f54f822727bb","sha512":"49ad0f9493611e264ea57c778348f9ae16bd5b647d11954a5e4b176bcec663c511ee28d84b2de8e3c28f1e4756188335e0ccc1354fbb3e87ad32c3eb13a477a6","ssdeep":"6144:WcCwaKiMDXS8HEbdBHV5dE+KTGpCDzMb6C8obUcJ9FQh:9q8S8ktBKCEz86ZGUcJMh","tlshash":"4d2413add357de2afcd976706dfdde02f364465da167aad03e840863dce1b0480a08e9","first_seen":"2026-02-22T15:30:46.837209Z","last_seen":"2026-02-22T18:47:04.927119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.info/pop/site.png","fqdn":"cdnjs.info","domain":"cdnjs.info","tld":"info"},"ip":{"addr":"172.67.172.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 23:46:22 GMT","end":"Tue, 19 May 2026 21:41:06 GMT"},"fingerprint":{"sha1":"F4:BC:63:6B:57:FF:1D:DB:35:4B:FA:40:49:97:92:1C:D1:42:8A:F5","sha256":"24:60:90:BF:D6:93:A4:65:48:97:36:2D:4E:8C:36:70:B8:9A:76:6E:43:04:34:B8:14:CA:3E:9D:F0:0A:A2:72"}}},"request":{"raw":"GET /pop/site.png HTTP/1.1\r\nHost: cdnjs.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 31954\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Feb 2026 13:55:14 GMT\r\nlast-modified: Mon, 27 Nov 2023 14:24:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \r\nage: 178481\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qk6sMAs6G9x2G0oqUJYTjsHwAkeAhnUv9We2%2F23htGaUTyzvIcFYikLm2JptzGDrbu77PDfgEsy9k7RI%2FY1Go5cWUSwuivYou3Q%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9d1f85a2599fbe94-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"12c87cf968920b6c4eaa647af1599489","sha1":"2dae5fb03f854f54d0cd7e84c089b85fcae87901","sha256":"384f866547d1ddcd206d9456b491ec451b431b439930e071fbc2dc5e62f9a07e","sha512":"c2aa2ac9444b295941f435db0539dbaba8e21d93806646655b4ba5433b76352a8d54b37344b69c3e47eabbe0b6ed8f4f466609a501b6903428181268257a07cc","ssdeep":"768:BYsNt/NEkWCx2ckHSk0vkg/lMmnzKvXzoJjWdnNl:XNt/OStk2vkg/lnyznxT","tlshash":"fae2f123abbe9c08f45160918af598bfd70208b957dc61c4087fbac40f0926e974b9f7","first_seen":"2023-12-27T23:15:39Z","last_seen":"2026-06-11T20:08:09.387549Z","times_seen":42,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":136,"dns":26,"connect":8,"send":0,"wait":29,"receive":3,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9hc3NldHMvMjAyNTA0LzE3NDUwNDk1NTktNjI0My05MjEzLnBuZ0AxOTc1MDdjNzU4ZmQwNWM1MDYyMjE2OGVlNGQwZDQ0Mg%3D%3D","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9hc3NldHMvMjAyNTA0LzE3NDUwNDk1NTktNjI0My05MjEzLnBuZ0AxOTc1MDdjNzU4ZmQwNWM1MDYyMjE2OGVlNGQwZDQ0Mg%3D%3D HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nset-cookie: referer=https%3A%2F%2Fbazienfj5285328.xyz%2F; expires=Mon, 23-Feb-2026 15:29:57 GMT; Max-Age=86400; path=/\r\nexpires: Tue, 24 Mar 2026 15:29:57 GMT\r\npragma: cache\r\ncache-control: max-age=2592000\r\nvia: 1.1 google\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zt%2BB3rsc5BrwwYQSKlhYLp4crs7WtQFFoyYn6ugFJSuT0TbBByWM%2BhZni7vqml09phK4E04py0e2xsuJyyt36I1W9%2FjXqLALgnaiZBv5l2eX6ts%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d1f859c9f8e9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12067,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 643 x 270, 8-bit/color RGBA, non-interlaced","md5":"69dde864e6388538f90b4c040ff545c7","sha1":"32b6fc324d2ed6f511f8d6a50b171eb6968f0523","sha256":"b160c09993d1b536270277f108b1b6e74ba8a3a54f4b9e73526a26f3b1676054","sha512":"19f8203c5c365989d4e5d68cddc57dcb98464f8ac48c0ed80b28559083cab470277bf2e9c506fd1698244b70e951085d429b0086603514037fbe9fed7d516ac2","ssdeep":"192:HVS3kn83cRovhEBgYuPJeRlTc4HizTZ6GR49q6dzX7LfT5ZQ4LX+oIrkstjVImiQ:H00n83cRPscRGmivZnCVzdZFzxstjVIE","tlshash":"6b429e4def05a2e160cdd807808d4c8b67eb2bcdd76864a3226fed23ec654e245588d6","first_seen":"2025-06-19T13:31:37.096785Z","last_seen":"2026-02-22T18:47:04.945742Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-N5P4VCNB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtm.js?id=GTM-N5P4VCNB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\nexpires: Sun, 22 Feb 2026 15:29:57 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 22 Feb 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 116506\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345835,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5376)","md5":"1fab0d5b743050971f552cb0e2c4f600","sha1":"2104445ac12fde5428266d77a6a7dec08c65d312","sha256":"6a1aadb7a9c2c4ce3b44d337a827983f21a916956a9627f86cc9f6cd8fe44da3","sha512":"861f785a62ee98b4e13021524ecdcf61eadf39cfc7eb387d6dfba3e28740e21d55bbb5824a4b16c03147851d50d8c735ed0e7a3deb5a32e00c17291949fced64","ssdeep":"6144:r4D83xaAJljxXU18kKDeDKJN5hSppv/UalWy:Mw3xaixk18CD/U6","tlshash":"9d7417cdb3d6742693a2a478403f118bb17b69a2f84cc895f186dcd42d709aa4237f7d","first_seen":"2026-02-22T15:30:46.842342Z","last_seen":"2026-02-22T15:30:46.842342Z","times_seen":1,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":92,"dns":15,"connect":11,"send":0,"wait":40,"receive":32,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/icons/top-bar/help.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/icons/top-bar/help.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1239\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\netag: \"59bed4d0-4d7\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5LSIN7eQpaQXFIpWrM5Ji65oA7xa5Qwii9Uplj2iDscdbTp14xHYI1DTE7C3SHogzVKgoweRJ3TWhe8hP1%2Bv2lr9%2FVpcGzMpwMstpV0IfJOHTQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859caf979a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"33a05d2354da155bfc9eb6c05b126d81","sha1":"e8d1e751552480fcd655b9c6fe8618bb67b651e7","sha256":"8b9e04933efa8d4068a30fda53c8141236d48fedf0eee902f983c7564c2b0ca1","sha512":"bc146732c7f33cacb86f1264cb5311548377a368063e9448e58f62d8962201f31bc3c0e38a44fa3e4db7bf68fd9e64fc0597134fa866bb29da09f408dc7a22d5","ssdeep":"","tlshash":"9b2195998191413c8c0ddbe2412726342ab97f688faf2089083e47285e0a536de6b4bb","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.128503Z","times_seen":255,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjMxMS8xNzAxMjUyNjg1LTc1MDEtNjM1Ni5qcGdAZmY4NGU0MjM5MTRjOWMxOWIwODVmN2NjMWMyYjM1NWI%3D","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjMxMS8xNzAxMjUyNjg1LTc1MDEtNjM1Ni5qcGdAZmY4NGU0MjM5MTRjOWMxOWIwODVmN2NjMWMyYjM1NWI%3D HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/jpeg\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nset-cookie: referer=https%3A%2F%2Fbazienfj5285328.xyz%2F; expires=Mon, 23-Feb-2026 15:29:57 GMT; Max-Age=86400; path=/\r\nexpires: Tue, 24 Mar 2026 15:29:57 GMT\r\npragma: cache\r\ncache-control: max-age=2592000\r\nvia: 1.1 google\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6oU6oqA5TEDkUjS2HKbMqHKxkvNGhl3907ACHClCro7BllPoprBK8wz9fjn9bjgDScofrQjNVs0a1f6%2FoJhuqhYqp3PppSl7de30nJe18bAO9YQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d1f859caf989a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 700x350, components 3","md5":"cae4fc38ae1c0963d8777e2513faa3f9","sha1":"67547a3966f03353c631080ac8cae3d23752ad9e","sha256":"7afbfddb4aafb74d41e2724d08b1f520b84d9fbe1a814b0e8f2769fdc62c334c","sha512":"82c3ff61060c57ed49c52cd065e3f87a51a3846d89c3c5541ba22e7f967b02e4325b36abfda26ac7ed77638b61b053f2365de1c169be4767670f28a0e4cc0ca4","ssdeep":"1536:ey9fP0PhlJLv8I+HVYvIRVMUxKA0+T0gVdMYEel5:LyLUI+Hg4VMUh0xgVDl5","tlshash":"9553023e52623d84d1bc7f71a1c84e629a70d69c121b6f0804247bdd781321db69ebde","first_seen":"2024-08-19T21:02:23.697185Z","last_seen":"2026-02-22T18:47:04.942084Z","times_seen":5,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,400,0,0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,400,0,0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 22 Feb 2026 15:29:57 GMT\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a9d77869bc0c8a64bfcbc40f712a1fbe","sha1":"2d6ae9c6b6e948840f53ed21d226a1f72f825c43","sha256":"e71cb2f6e347954b780f4cf2101ab83b750293d23cb7b28f0c6c0f5ef36b36a9","sha512":"2bf8c68ab331ac2d2af028c105f052226e8f9609d6cecdc7edf1a986dab0130adbde74c4d59e36324725be7faed0b893d6e153405ef39398d3fc5d1995acde5d","ssdeep":"","tlshash":"2f019e58aa565505a1550c43330f3f225e19451f394ad8beef460d0c9efe8770385f0f","first_seen":"2026-02-18T05:45:21.183192Z","last_seen":"2026-02-24T21:23:42.885141Z","times_seen":49,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":160,"dns":1,"connect":21,"send":0,"wait":49,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.info/pop/apple.png","fqdn":"cdnjs.info","domain":"cdnjs.info","tld":"info"},"ip":{"addr":"172.67.172.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 23:46:22 GMT","end":"Tue, 19 May 2026 21:41:06 GMT"},"fingerprint":{"sha1":"F4:BC:63:6B:57:FF:1D:DB:35:4B:FA:40:49:97:92:1C:D1:42:8A:F5","sha256":"24:60:90:BF:D6:93:A4:65:48:97:36:2D:4E:8C:36:70:B8:9A:76:6E:43:04:34:B8:14:CA:3E:9D:F0:0A:A2:72"}}},"request":{"raw":"GET /pop/apple.png HTTP/1.1\r\nHost: cdnjs.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 12598\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Feb 2026 20:31:35 GMT\r\nlast-modified: Tue, 14 Nov 2023 12:00:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 327499\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTs6X8cOT%2BT8hbVmDYh6tx4fWyJJYLVSWxwu7rWaZJAMU2PtU6xrvsFhE9z3FSzolqZM31EI6fQgFFLxec%2BFLDlcBL5Kc4mBito%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9d1f85a29a31be94-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit gray+alpha, non-interlaced","md5":"0c4bdb8b5e3dc4f0d5ad41f68eca6af0","sha1":"2d6983efa445c28faf42342bbd31da31b07f01a7","sha256":"9f1554c1739c4d8772bd1c62bc644766c7d73b160075bdc53e137d90819c209c","sha512":"45ea51fc8aac1e2ac98f03f5295073d1a871b5409a0e26f6e66c413fd10319d864f6b290c56fc07807bf96753ef023f9574906fcc081c70db244dcc654567d2b","ssdeep":"384:VlxTwgWOyKeu5BWQUk9ZF/m/ZP6HXDwpnh:TWduOQLlm5Npnh","tlshash":"2942afd0a0a1e7d0821f9460f0eb17298de613d759670f692878f6ccd8df08756ba2bd","first_seen":"2023-11-16T16:47:18Z","last_seen":"2026-06-11T20:08:09.404322Z","times_seen":117,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":165,"dns":21,"connect":15,"send":0,"wait":30,"receive":4,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/fonts/Dubai.css","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/fonts/Dubai.css HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/candy/assets/css/default.style.rtl.css?1000.016\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 19 Sep 2017 15:48:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"59c13c68-4e8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuXdOM84b49t3I%2BKilswgoKM9oWc0dMAnO5Y0T9g9TGMgy1Nro1BSDdoz8XUzKzvjnTk5Me%2B7iUBR6h5xC5v5nLqmmfJhqEAk9sqH0NeISSLCKg%3D\"}]}\r\ncf-ray: 9d1f859d7fc79a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e6d9768ef03d1b84bc2619df4708a684","sha1":"eaaa51cc0dfbbd3cdeb650b7f743663b677b5f82","sha256":"dd34ea756aad5f72bca459ef121608a04bbea5971b77bfbaf6628de04dbf8c04","sha512":"dbfcd08cdd393663536b75e1130e13d42c7f3696777b225c1edf66762883b066a701111209dbf14b81441c49648b263d42268293d09432ec77ab8a1d8c8924db","ssdeep":"","tlshash":"4421b69040f735324bb20c1563dbef15cecea6565c08a857b72b7918fde2814d2e6b1e","first_seen":"2023-07-01T08:35:02Z","last_seen":"2026-08-14T18:29:18.129602Z","times_seen":107,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/fonts/FontAwesome/fontawesome-webfont.woff2?v=4.7.0","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/fonts/FontAwesome/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/candy/assets/fonts/font-awesome.min.css\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 77160\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\netag: \"59bed4d0-12d68\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNskA98MFcHPKqHRvTn6l37zs8QMnjungGLf5Xwc5lJdC1ASBx5cTtGV5nkHVTNYuVtex2eGqXOTnEX5l7orV1m9QLE0brwezrzO8HdTfwFPqeE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859ec8189a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-19T21:44:18.016268Z","times_seen":533231,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/default/assets/fonts/IRANSans/IRANSans-Medium-web.woff2","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /default/assets/fonts/IRANSans/IRANSans-Medium-web.woff2 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F; _ga_D7M6MS479K=GS2.1.s1771774198$o1$g0$t1771774198$j60$l0$h0; _ga=GA1.1.924633656.1771774198\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 31692\r\nlast-modified: Sun, 09 Jul 2017 18:15:05 GMT\r\netag: \"596272a9-7bcc\"\r\nexpires: Mon, 22 Feb 2027 15:29:58 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8e8NxJSq7%2FXOXW0Cy2YZBTwsCLX0ZV6mNhUaQbbV87T63H17ktaJ5DSBH%2Fb6wAQZm9zuTqq%2BHdLQbcLvly2Zh4qqYmW7%2Fx7d1sg8VX%2FmnYzJP6s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f85a429839a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31692,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 31692, version 3.0","md5":"068aff9626a6808a412979cd68987229","sha1":"d9a09a1b2361983e28db2263fd601c6a235b101d","sha256":"83f2088182a1c38208b59ea971a02dac54f9f0e82af6d4ba938532456f88e51a","sha512":"295cd7ab8a76c2f5d1b47080978238fab95ded15a62e4cc108678b4f2b5325b127c7658f761162d9d0c5e90280fb190b31b3741184a1b780e459da41a2a0f35c","ssdeep":"768:wt9nPAS+jEt2gO9w8yhmiuQxNBnBZTvis+NE9L:snPvtr8y7uQxNBas+NE9L","tlshash":"e3e2f020d674b61cae26cb71ef2344268a766ee31d19473d17536bda306695c2c0f81e","first_seen":"2023-04-07T02:32:48Z","last_seen":"2026-08-14T18:02:44.773073Z","times_seen":276,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/css/fix.css?000.000","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/css/fix.css?000.000 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 13 Dec 2017 17:15:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"5a31601f-87d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKE5pQyiT4LtwdL81uB0rQ9ap2yrApLqkaY9I3TJTjyl7aZk39j3eWSTCCUSTDr0BQOP3hiNpBe%2FjUbQilXzFdBXQG6zSjq%2BGZiwD5MFvFqN5Y4%3D\"}]}\r\ncf-ray: 9d1f859c8f869a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2173,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"be2d3e42cd0ab054d4e51d1ef476af2b","sha1":"971916c8fee60cd6c3780b5f2c6e1729ae4afbe6","sha256":"5ba1d077b7ff448acf35ffb223d12ef647de21289d10b9ac4de1969122ed75c0","sha512":"1103276acd570c2609fee6a550ff4039cccbe33084b97eb01b29b3078df0eee04efdebf6665688859648511a7a21e0952ca8c21ffb55e5c880d1c94eebdf4810","ssdeep":"","tlshash":"fb41b68bfad3201098a2049a992377fdbf796d45975b4c35a9e63f3dea00cdbd440186","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.158897Z","times_seen":151,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/plugin/sweetalert2/sweetalert2.min.js","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/plugin/sweetalert2/sweetalert2.min.js HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"59bed4d0-53fc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ai5qk2sn6wm3mXXsv8AXIwzLDRiNO%2FVq075PgZonD50CvfH0jPHZe7ku28Cyv8PNm8aA0WN0rwCdT9D9P33iLnTNqsExh2aXrfUMLxCVgciXhdo%3D\"}]}\r\ncf-ray: 9d1f859c9f8a9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21500), with no line terminators","md5":"3fd5c368c8406faa9dd1749b4f8de452","sha1":"70f3824c6b735191d96c6d2b68779d9b4e2497a1","sha256":"26822d1a5bd122462c9e53d0dbe9b521061875e9d96becae92d1860c4f6e0e0f","sha512":"da965f00f93dd408230b481662bd85d7d31b65f3fa5c019efde15b3a2b0e413ba95e2aa672d0d8ff70477e3e987d67ba9fa3492e2a827a15b57837a94f0f253c","ssdeep":"384:mZEYKzC+V3uNwF1bR3rfBFty6Rt9jK13aeWnNTGvnTniFhw7mvFni09H/79/QiYb:hYG39rc6Rt9w84v7idVLJ7YIVGTuORu2","tlshash":"22a209943554743706a794ba69ff114bf632249cb80a4930b12cc5a47ebcc859b73ffa","first_seen":"2023-03-07T13:02:28Z","last_seen":"2026-08-14T18:29:18.166587Z","times_seen":504,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/icons/top-bar/crash.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/icons/top-bar/crash.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1282\r\nlast-modified: Fri, 19 Jan 2018 00:27:33 GMT\r\netag: \"5a613b75-502\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKdMinqhvguRgWpW0QmBO9Q5kTZwroyQLOIgu4I0I5BqmXmFheeRejkWH20wixEA5IMIoYJQ0ZgkYuMqhsowlVI%2F3%2FIa%2BhbJVFsOYVfm2iEcreQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859caf959a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"40695540e0c3148914e9b77f8aa5e46e","sha1":"afe503bcf16456d9f116cc192e6bd9d3c5273f6a","sha256":"d2013fd397cdc4c5271c1c63e45c4fe1cde465ab838f7d8e3d2cbfde95c7fc36","sha512":"6f1bdc4ab731629f8f623d24683270e7df538667518cd276a5cd6863b06803b5e4bad31fab5ccfa7be4d3a0a4a6a28c25bb321e44e4350830bfed302ccc829da","ssdeep":"","tlshash":"db211a9e40c0447c9c1fd7e3143b022027fe7a600e7f164d097e9a281e1e6bde86687b","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.118579Z","times_seen":255,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjYwMi8xNzcxNDE5MTQxLTM0MDktMzc5Mi5qcGdANWI3ZjAwZmRlMWVjNGQ3ZjE2ZmY3YzM2ZDM2YTk1YTU%3D","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjYwMi8xNzcxNDE5MTQxLTM0MDktMzc5Mi5qcGdANWI3ZjAwZmRlMWVjNGQ3ZjE2ZmY3YzM2ZDM2YTk1YTU%3D HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/jpeg\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nexpires: Tue, 24 Mar 2026 15:29:57 GMT\r\npragma: cache\r\ncache-control: max-age=2592000\r\nvia: 1.1 google\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxGVwwocRcfqJR0Dv%2Bx0PyQKnbeCcqs5cN%2BLAWHVHJbo8tyUXCHcMQKzB5UsBij7dDmLsnVgv14IqLQtkpJylvZXmEMW7X5RY%2BPBqkGR3qLC9T4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d1f859eb8119a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200410,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 3117x1300, components 3","md5":"61cd39540b557dceb13029ee712404d5","sha1":"3cd1eccc307796c94bfe65f3e9eb57b3c3ffeab3","sha256":"c70163f67a1af395dadd742f33b087b3617d1dd8a8cef78c6f70d3ed408e50ab","sha512":"eb59d751343415f30ad8964642d773c80707fee3a0e3b48a7ec16e9ec5100431bd789f90427a00caae135e0deee526108fc4ab514f155660251b02d7b7dfe0fa","ssdeep":"3072:2PQ0fFfVriRL6qQroMxw6ALG1h0EfzKMv3qnsJv8U26WcIv1cScHhbw66PwQ1aOo:240dliR7woAWiZfz5fqs1SeXBbcP98DV","tlshash":"d7142289dcd57a29ef0e38c3d4ba26b7e117c035ad1fba7227124823f2fe3990565509","first_seen":"2026-02-22T15:30:46.854336Z","last_seen":"2026-02-22T18:47:04.961617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/js/script.js?1000.126","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/js/script.js?1000.126 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 11 Dec 2023 17:18:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"6577447c-1e29\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4dAACEP0NFlXgdE29UeBL5t8NZE%2BwjsdCwIMWLZUf7faJQ0l%2FPYFhZLZdcHADkENjbm6nstlnHRxBU8f0HGNxaKPe18WtVLAMjzFZlDUtSR9jWk%3D\"}]}\r\ncf-ray: 9d1f859c9f8c9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":7721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c16aa2b506f77a63aab0b5d86c929b6d","sha1":"56f483d24b1ad414f2799abb8d24d54b4a276b60","sha256":"a565c37ce9a4009fc867bf41c1e4f69188d383db6c6b864ea5c2b3250838fe89","sha512":"d6d6c4146307125c2880d92285dc642ac2a9612758e3def16b1f16f872193b9b984876627c650d809cdd4a0c01044f2213a93bad871980f2cf3231ff0d80c2a9","ssdeep":"192:b52O2GsN+C++3U+dpG3CM3C++nTGsNzSQPxJGsNIQ:bkA+2Jl+nTG8zG5Q","tlshash":"73f16384f7dc392543753ba9db6f01c951b88402eb885c67ec6c95f46ed2b3800b6e3a","first_seen":"2024-06-02T06:41:04Z","last_seen":"2026-08-14T18:29:18.123584Z","times_seen":111,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/js/bet.js?1000.700","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/js/bet.js?1000.700 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 24 Jul 2019 03:07:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"5d37cb5c-370d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lrdSCPA1VY7uY643qCN5H6ndEBiflmpjCi890Xmuv57yUBKJ8f%2B7RzQYjyICeXaSICC64dJYsAwjG7lNGY7sX%2Fofi0rJxkgLEOcMCRmAtgJPM1c%3D\"}]}\r\ncf-ray: 9d1f859c9f8d9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":14093,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7061b268c95f9c181e7c31b47260e043","sha1":"39ab45d0f7ab2b653c7df14263868d7ea2c710b9","sha256":"348943c0e3027588b1617f41d38b3938b899caa51645669cbae925ea617c5d9c","sha512":"7b7c54e6aca0331e60cceffb86a5b755fd203fce4bda6e4d76752151b22ad54eb8ddb2ae204cdd000d91c9d1e79a6d384f765ba6601a649bfecb1b38b144271b","ssdeep":"192:f/LtmhZLPm8Znk7sHbn7i//3Kpbyax9FeSYmCOT9Ks/CoPN0LOc9HwE3:q5lXqMPFCmH4RoO99Hp","tlshash":"23526344fbac2829c1b122ee6c6d10cea57ce833e0659de6fc79d4646bc0e194365e37","first_seen":"2023-03-08T06:44:38Z","last_seen":"2026-08-14T18:29:18.103188Z","times_seen":241,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/default/assets/icons/top-bar/support.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /default/assets/icons/top-bar/support.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1250\r\nlast-modified: Sun, 09 Jul 2017 18:15:19 GMT\r\netag: \"596272b7-4e2\"\r\nexpires: Mon, 22 Feb 2027 15:29:58 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmFj66h9m7cRBeX%2FvPRy7kCQB2TOy0E2PqW9bGSfUGq%2BB4cYl90vhRkMZS3bd2KLC1JY1O63FNAxwabLorZuFXWe1gpR%2B9mEULYTWL%2FOcG1bML8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f85a158bb9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1250,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"caff4cc7b91856c65c70226fa4780df5","sha1":"47b73eb7041237af4adc7b20eb283eb515c3b1a6","sha256":"71aaf53aad3e9a38905d73eb0a32ec2f1ad0797758dfbb12d6426604a3da17f3","sha512":"1f73b247165d36828d1143abfe01cccdafdca72f8547a6cbaf2a61ceb0a32aedecacbe5a23c3cd13cb7ba547a60d5233e60008a8e3f18fc154fe45547b966f23","ssdeep":"","tlshash":"5321e7556240843d9e09caa3d053502079c9fbe44f3f104209bd87b5594e6ea95a7467","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.119251Z","times_seen":255,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/default/assets/icons/top-bar/crash.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /default/assets/icons/top-bar/crash.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1282\r\nlast-modified: Fri, 19 Jan 2018 00:27:33 GMT\r\netag: \"5a613b75-502\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WqdxMMnCsfVC25NraBGhJBtqHAiVqI3iBHWkHQ%2BypHVn%2BWGDjK6%2FFb3HnaZUBUhIKvWzW7SBe8uWJKbEzZzyROt6jRJVRCGHEXVsxyKK%2FHQfDy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f85a158ba9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"40695540e0c3148914e9b77f8aa5e46e","sha1":"afe503bcf16456d9f116cc192e6bd9d3c5273f6a","sha256":"d2013fd397cdc4c5271c1c63e45c4fe1cde465ab838f7d8e3d2cbfde95c7fc36","sha512":"6f1bdc4ab731629f8f623d24683270e7df538667518cd276a5cd6863b06803b5e4bad31fab5ccfa7be4d3a0a4a6a28c25bb321e44e4350830bfed302ccc829da","ssdeep":"","tlshash":"db211a9e40c0447c9c1fd7e3143b022027fe7a600e7f164d097e9a281e1e6bde86687b","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.118579Z","times_seen":255,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/default/assets/icons/top-bar/help.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /default/assets/icons/top-bar/help.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1239\r\nlast-modified: Sun, 09 Jul 2017 18:15:17 GMT\r\netag: \"596272b5-4d7\"\r\nexpires: Mon, 22 Feb 2027 15:29:58 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OJTQqvf87q4WLXUNnOa21MgTY8y8iQhj9%2FipaHC3TD8lyb6zDgLfYGqBhFlJJmi%2Bgu4PwzlLy6Tiq7QRR%2FVHXkm9lwVj51BT%2B0ngy8LRhB9lwyo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f85a158bc9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"33a05d2354da155bfc9eb6c05b126d81","sha1":"e8d1e751552480fcd655b9c6fe8618bb67b651e7","sha256":"8b9e04933efa8d4068a30fda53c8141236d48fedf0eee902f983c7564c2b0ca1","sha512":"bc146732c7f33cacb86f1264cb5311548377a368063e9448e58f62d8962201f31bc3c0e38a44fa3e4db7bf68fd9e64fc0597134fa866bb29da09f408dc7a22d5","ssdeep":"","tlshash":"9b2195998191413c8c0ddbe2412726342ab97f688faf2089083e47285e0a536de6b4bb","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.128503Z","times_seen":255,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.info/pop/android.svg","fqdn":"cdnjs.info","domain":"cdnjs.info","tld":"info"},"ip":{"addr":"172.67.172.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 23:46:22 GMT","end":"Tue, 19 May 2026 21:41:06 GMT"},"fingerprint":{"sha1":"F4:BC:63:6B:57:FF:1D:DB:35:4B:FA:40:49:97:92:1C:D1:42:8A:F5","sha256":"24:60:90:BF:D6:93:A4:65:48:97:36:2D:4E:8C:36:70:B8:9A:76:6E:43:04:34:B8:14:CA:3E:9D:F0:0A:A2:72"}}},"request":{"raw":"GET /pop/android.svg HTTP/1.1\r\nHost: cdnjs.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1299\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Feb 2026 20:31:35 GMT\r\nlast-modified: Tue, 14 Nov 2023 12:00:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 327499\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4P5Gj4GfMPyerVlE39ju12CWQ5e3FnZ2nMeIhXGMDmA856VrvRB7TK4%2Bb87LkNwYIOx5nXO%2F%2BeLabro%2BtlSjDXbcfiC5LfwaIJk%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9d1f85a269c8be94-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4111,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7fa5bf0b1174cf9ea90c1edb6d557213","sha1":"6061f03f3f3dfbf46d7634c191229f57ccd14cd3","sha256":"a1077cf35e58f7c5846d523064808cba59a0ea9c0ddfcc57f891e7015cc1e90b","sha512":"740806faec3b69c0e9b0719e504fda78bfbd62b28cc855e25743a5a8fd95b91e700e0c3baf1ca84731efdf5311acfb886df25c6c171343f32b7e9012ce67163f","ssdeep":"96:kIDJAsLl9Z1CzT2GfusCME/C9l9O11QHi833Il9v11jY:BDSWl9uecXl98QHi64l93jY","tlshash":"c4816480d733d5f9d2958b2aa5b42e673e38d4d1777281c8c21fed273062e509428be5","first_seen":"2023-11-16T23:46:20Z","last_seen":"2026-06-11T20:08:09.423293Z","times_seen":26,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":141,"dns":16,"connect":15,"send":0,"wait":33,"receive":24,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialsymbolsoutlined/v315/kJF1BvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMzByHX9rA6RzaxHMPdY43zj-jCxv3fzvRNU22ZXGJpEpjC_1v-p_4MrImHCIJIZrDCvHOej.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/materialsymbolsoutlined/v315/kJF1BvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMzByHX9rA6RzaxHMPdY43zj-jCxv3fzvRNU22ZXGJpEpjC_1v-p_4MrImHCIJIZrDCvHOej.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bazienfj5285328.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 313144\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 18:40:06 GMT\r\nexpires: Sat, 20 Feb 2027 18:40:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Feb 2026 17:31:24 GMT\r\ncontent-type: font/woff2\r\nage: 161392\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":313144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 313144, version 1.0","md5":"5da3103a8b215d97a1d39d9ffc3d1487","sha1":"2e759a8a369d5e068bc17f51cf347d3454448635","sha256":"6be6393609417add8369990824334fca6839e148b7cf6e8c92f9847e722067c8","sha512":"9052770c60b2b1dcdc7f60ba480c7e48aac086a68a68a9af6c64177879128ed9ba6826399d2e1ca83abe8202cca1b3775d0c92d2b968f24927ead60a47ae03da","ssdeep":"6144:4q+mXni4LcT+WDbyuT0urO7PrPw71qGqcG4Si46Jj068:4q+mXniXmuT0FzrP+1CjX36JIf","tlshash":"4d6423897f00bd8bd4075e85e52b0618b09e7fc6bb1733d42d3ce5b6b9366e60e5404a","first_seen":"2026-02-18T01:13:26.127441Z","last_seen":"2026-06-08T14:37:52.311237Z","times_seen":74,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":244,"dns":10,"connect":15,"send":0,"wait":9,"receive":37,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/fonts/Dubai/Dubai-Medium.woff","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/fonts/Dubai/Dubai-Medium.woff HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/candy/assets/fonts/Dubai.css\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 82368\r\nlast-modified: Fri, 21 Jul 2017 00:39:16 GMT\r\netag: \"59714d34-141c0\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9P0GKrzwJeBHs4id4dGusi%2Fa9VhOxWAnsD76xEbcyD9PgNbEPFWnEavixQ1x6sgxT6p90M4ZL%2FQi0qJsX4PXlMNCVeN3EZbKSkzCXREYQzSQI9U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859eb8139a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":82368,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 82368, version 0.0","md5":"8bd3b23e96e89d183a07efb4d03be0d8","sha1":"78c560419d08a9c3c725fa3c84150dc4ee492b9f","sha256":"d2881ffdc6ba55947f44942b1cd164e97be23bad5457d1b23be34aa1ef266877","sha512":"031dbdbbfc535203039211bac5413de117f7199f147159e680472fb87570d6bc8a45003123cc3649703abd7a08ceef51494ab1657a04943ff009c7b06491958c","ssdeep":"1536:HrjP8vsWkHscueyHpQNf5X8/0Tm6u09CO+lYFc8kvuv3aGlGZUUUUUUUUUUUUUU5:HrjPRWkMOYpQd9AlIkm8ZUUUUUUUUUUF","tlshash":"cd83f1e21788c388755d86f77ca8fb0719cdacb4f77aba314269208d6dc801db59f248","first_seen":"2023-05-11T01:35:49Z","last_seen":"2026-06-13T11:06:37.553317Z","times_seen":25,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/fonts/Dubai/Dubai-Regular.woff","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/fonts/Dubai/Dubai-Regular.woff HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/candy/assets/fonts/Dubai.css\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 82500\r\nlast-modified: Fri, 21 Jul 2017 00:39:16 GMT\r\netag: \"59714d34-14244\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibpUflPRIaUZrimcB%2Fqs4iuA4kWnhNXWTtacSW6FI5aRnCR9dYeLtflur0aDKTBLE6vqo2U3lymrC5s8NBFW0i20lGMS0B294G61HDkkZl1MIRE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859ee81b9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82500,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 82500, version 0.0","md5":"db4289d4a2f8bddfa4bb69c00b570212","sha1":"6672c58cb9f4112a391ef7f6b541c8dd9dcb1804","sha256":"7ae67d94f8f7c8bceaaa4147d139b085ba3f7a460a06331b85232e9c0c2140da","sha512":"8b036a1c6a433b21d65287758f005baec182a7376ea703e6731e014cd6e0dc68044d0fffa440a99fb8f3e163c55cb641ba9e5e6a305ff1977138b097de795f0b","ssdeep":"1536:y4bdO3uvI0frcQqmx7S2Fefh52HahKwvujKX4M1pGbmlab7q3:fbg3+fAQqm7ofh5bhzm0wbmla0","tlshash":"4f83f15473d4d69124be03d3df1af29b0a987178b8de0f3a1b2766190dc4d8e63ab10e","first_seen":"2023-05-11T01:35:49Z","last_seen":"2026-06-13T11:06:37.547769Z","times_seen":26,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.info/pop/telegram.png","fqdn":"cdnjs.info","domain":"cdnjs.info","tld":"info"},"ip":{"addr":"172.67.172.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 23:46:22 GMT","end":"Tue, 19 May 2026 21:41:06 GMT"},"fingerprint":{"sha1":"F4:BC:63:6B:57:FF:1D:DB:35:4B:FA:40:49:97:92:1C:D1:42:8A:F5","sha256":"24:60:90:BF:D6:93:A4:65:48:97:36:2D:4E:8C:36:70:B8:9A:76:6E:43:04:34:B8:14:CA:3E:9D:F0:0A:A2:72"}}},"request":{"raw":"GET /pop/telegram.png HTTP/1.1\r\nHost: cdnjs.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 21607\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Feb 2026 22:44:30 GMT\r\nlast-modified: Tue, 14 Nov 2023 12:00:41 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \r\nage: 319524\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOPmY%2FxJIqQI39Zrc8318Z53RTyimHKet%2BsOW9KXKtqD15LIkIvwwGVt2WntMpk2SXI4u41Ubd5Z%2Fadh4EwufrbWoq%2B9Ymf46a0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9d1f85a269d0be94-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGB, non-interlaced","md5":"819c54915cd766e83579b7ce6817fc59","sha1":"3c0ff66a4eede3c2a8f12b9858789f86284d2776","sha256":"6079747e7584ed46b499ea98a60eda6ea5225cea5a8a487fc3f8e84ba6499b8f","sha512":"8404b5975c4c3ee9fb52a92757fd4203e12583998020ae612faaed52e4410c633357374a3e6bffc28aea8d867527540f58a095bec6d2959042a8d9bfe2a71702","ssdeep":"384:3Gl5vXL4kVzaw44d+sS8OFM5ASu4FKfrnBA22uyVc/LfP:3GlZXkkVd+0D5/+BUu4oLn","tlshash":"61a2e18f05dcaeec7f04868468103dc88fd719a1a70a76578619f294b29f090fb66e20","first_seen":"2023-11-16T16:47:18Z","last_seen":"2026-06-28T19:53:56.739236Z","times_seen":122,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":144,"dns":25,"connect":8,"send":0,"wait":32,"receive":24,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"githob.co/api/sites/6/style.css","fqdn":"githob.co","domain":"githob.co","tld":"co"},"ip":{"addr":"172.67.211.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"githob.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 16:01:14 GMT","end":"Wed, 15 Apr 2026 16:59:58 GMT"},"fingerprint":{"sha1":"C9:2B:48:B6:2C:C3:9C:04:AE:E8:8B:86:AA:22:32:A0:E8:7B:1E:F1","sha256":"D6:14:0E:7F:8C:49:3E:12:47:39:11:A1:C4:45:29:BD:1F:E8:B6:6C:8D:79:AD:21:DD:73:E9:20:65:C0:EC:47"}}},"request":{"raw":"GET /api/sites/6/style.css HTTP/1.1\r\nHost: githob.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bazienfj5285328.xyz/\r\nOrigin: https://bazienfj5285328.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Feb 2026 14:02:40 GMT\r\ncontent-disposition: attachment; filename=style.css\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 23 Feb 2026 15:29:58 GMT\r\ncache-control: public, max-age=86400\r\nx-cache-status: HIT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BS33mr7jGt7xktmhpxZjV2LJtug7BvlHdV8MNsotrlV8E1%2BZXgEANBJlY1D5QNkPcqkN6h2DxLwbS3G%2FHxsEl%2BQAOo5x5zcm2A%3D%3D\"}]}\r\ncf-ray: 9d1f85a18fb775a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14980,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"2f5caae7e22d314ae01518f0f90079b9","sha1":"8bdc50e5231c24261a895d23c203b7555382a3f1","sha256":"a14fae3e9a75fd236e634de90631cc9f4e7b18febabbf4a1187ed02f495e99c3","sha512":"ee9a17de4fb92c8b2f09da6dd622cc736a7a321b058f6b6295cc87cb30f895de93c618f8da06ecbc62ad5036eea16ac5d0c6ea774402f3aeb86bbfb81ec82277","ssdeep":"192:m3Di7tqoQ4F/jQzMuBcn/9VuMB5dsWbGhAVNM7Vyi50yiPI9BOGoItmBgvKH1emO:K4F3z0s4RJj","tlshash":"aa627458d906111372b3aa6867730ba8db391017da4196be37f86254dff6c6c81e0f9c","first_seen":"2026-02-22T15:30:46.861092Z","last_seen":"2026-02-22T18:47:04.971449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":13,"dns":1,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjMxMS8xNzAxMjUyNzA1LTE5OTYtNjAxOC5qcGdANzk3MGIzYWYwMWJkY2JiNDVlNGIxNDQ4Y2NhODFmNmM%3D","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjMxMS8xNzAxMjUyNzA1LTE5OTYtNjAxOC5qcGdANzk3MGIzYWYwMWJkY2JiNDVlNGIxNDQ4Y2NhODFmNmM%3D HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/jpeg\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nset-cookie: referer=https%3A%2F%2Fbazienfj5285328.xyz%2F; expires=Mon, 23-Feb-2026 15:29:57 GMT; Max-Age=86400; path=/\r\nexpires: Tue, 24 Mar 2026 15:29:57 GMT\r\npragma: cache\r\ncache-control: max-age=2592000\r\nvia: 1.1 google\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XhoR0a5DAIRBRANJ49EdavLhUTgWkSEzxzb%2FePksDALDitC%2BMJZo4NK%2FXN0OkCbPcBqOiLmJuUfljgiLJwFs9kHd8dL20voSsQs%2FFoqwCZ69wnI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d1f859cbf9b9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":77452,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 700x350, components 3","md5":"975ed2e2f23a9d91350e46db87c769c5","sha1":"e8a16e4a4e02e6009d7a8460065f856ddf579a80","sha256":"20446bedbd94e18cb57e28e4db90c0d97e780c8051dd8b174fcd49a4e643b97f","sha512":"01290d279e189f305fa9252f582c682b17314d59e04330f3e0edcdaa3a50bd0e926ec59ab984085f56e5a6a3e049f86220796660f64611bb2ce8bb545d4dbbff","ssdeep":"1536:nBV2jhaF5687cDC0SsT9cLHQ3uwR0vYG2NI5lLHNPuRl6:nBVoa9x0dZGgu132K5lLtPWM","tlshash":"f573123f85be5e35f1a585706a68f0649f5ebd01341bd68eb2f87100b170b96fc28e29","first_seen":"2025-06-19T13:31:37.097674Z","last_seen":"2026-02-22T18:47:04.964597Z","times_seen":4,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/plugin/sweetalert2/sweetalert2.min.css","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/plugin/sweetalert2/sweetalert2.min.css HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"59bed4d0-3971\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7iiimvnKBDGN%2BH7jvjWTRc8qDCW2TYNAOX77BFLXGAqpvPixQf2mvCW64LRYiJFTo96ghomSnjHRD4QJmYHwF4lv2W%2FQelUAMy84ezzL%2BTzWO0%3D\"}]}\r\ncf-ray: 9d1f859c8f829a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14705,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14705), with no line terminators","md5":"a5a414a24ed9ce5e807f816837d622b4","sha1":"3ed672f4803c98b1bf718d8cb21f2ad84ce42c85","sha256":"43c9f3da700fb96cb02846edbacd99e0c40a2b815212ad9f4972b4ce8cddb41f","sha512":"2f928e6884391c27ba7613c5e303d98d7fbb5232857107bd34aae875530b4cbed8544b0ecb935b130196ff759ca6d1b36374cb183cfc4054406ac2fb9a5d04ec","ssdeep":"192:nLDrvBJ33Nf3lAIQe1gTtUd6xC30Zn9npgp73JYsYQ:nLDrvBJ33pX1qTicZn9G3JJz","tlshash":"f462216248c52157a1278f2272cced592de482576d330edab271f009cf93f9d22ab787","first_seen":"2023-04-07T02:32:48Z","last_seen":"2026-08-14T18:29:18.117896Z","times_seen":504,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/css/default.style.rtl.css?1000.016","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/css/default.style.rtl.css?1000.016 HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 01 May 2020 15:27:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"5eac3ff0-a7e5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Gq0j1bzZ4MLWQHKLJzsekqODvyq4qph19T0V%2BlOD0KSg8wJsdWFQKNPG8NXo9nD5Ej%2FFz1PTkRvEBs5nGV03PoMMF76PCmnKPXv0JYgPcronFU%3D\"}]}\r\ncf-ray: 9d1f859c8f839a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":42981,"size_decoded":0,"mime_type":"text/css","magic":"Algol 68 source, ASCII text, with very long lines (703)","md5":"fa0ba7908c109083db9887e977059c6b","sha1":"04d159f77d6cbc367c88fc2a5c0709cebaad4ce4","sha256":"b338dba471f73d7a75be14495104d893a0692c98d7f787fa529bf146a3e65f77","sha512":"124f1d8d1bd207c2ebd3861678394e9f0ab1b3fd881b7ed95347e3c1b2c5e687009bbd0ad46f0181267bb5f376e9004b00a293afd5a4767858eeeb3a830c1807","ssdeep":"768:qPp1tbNnCsGnT9xV/Sd2sKVKWeu/CsXtxAYG9pDyEssZ0Gl1yEdU9xlQ5gUx:qx1t5g9rSfsTn8V0O17x","tlshash":"c9136462d7121000f1fb5aadbe2397ee67395243f20766fcbdf07921c18d8a26172b65","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.122017Z","times_seen":115,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/icons/top-bar/live.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/icons/top-bar/live.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 334\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\netag: \"59bed4d0-14e\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUIfo56ey87nWMM9Jvt6XZgQV2HoHYI43yasXMweaI%2F4L%2FuItJvMidCss5x2tbJjg3o9BceaA9OyuGb8nuTIfLwwuOxwZut51B3Non1M%2B%2BKDT%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859caf929a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"e2941631de3ed7b92c6b15f2125f132c","sha1":"a2fa1e6a43e1259777a735949f487d42832562da","sha256":"92b9beda2961e2d7ce7c5360e66d040f19d4ef41a0e07da445f494967da5e111","sha512":"92f02abeeaeac48550c4324cdedaafd30dd8bd2d2e6ad799e5551761ac58c024c1b4b2efb19818df918af9c167b760b3d6d1306ce4e09e7ffcc980c62478874c","ssdeep":"","tlshash":"2ce0c0456a23c79ccfcfa534ed0621814c980953e1839287018644f6283050003c7951","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.167344Z","times_seen":255,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/icons/top-bar/casroom.png","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/icons/top-bar/casroom.png HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 455\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\netag: \"59bed4d0-1c7\"\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ItYamCivX9VO4EIvtaHKCN5XCe%2BAlOtJFrXdev2jilyw%2Fck9dQr4UmhuGZQ3P9jL1YdhCnLBh2UV3zCRZ8WZ6G5tILK4OD3o5VbfMtXBuxrAXPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d1f859caf969a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit gray+alpha, non-interlaced","md5":"75001dfe4b2da0a3048cfd9bb79a3001","sha1":"7614089aef8096f6565041384769ddaa721e3365","sha256":"65e2bfa54316fe5a1d5e3d13d38878e1f0a2985b692da1b7e7a90409da78e86c","sha512":"f32614eda7ddd00460a91dc9236cec220881609e7e776370ff849459c2b559c770c67de7a993f2cbd9e179f882504c73dcf82a4e4c4e458206bfe034c15d29a2","ssdeep":"","tlshash":"f0f023a501589fc6ca9ea236b2ff1b643f204699604dda4f013a47f3bd23c19d688263","first_seen":"2023-05-04T22:18:05Z","last_seen":"2026-08-14T18:29:18.114448Z","times_seen":255,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"githob.co/api/sites/6/banner.html","fqdn":"githob.co","domain":"githob.co","tld":"co"},"ip":{"addr":"172.67.211.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:58.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"githob.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 16:01:14 GMT","end":"Wed, 15 Apr 2026 16:59:58 GMT"},"fingerprint":{"sha1":"C9:2B:48:B6:2C:C3:9C:04:AE:E8:8B:86:AA:22:32:A0:E8:7B:1E:F1","sha256":"D6:14:0E:7F:8C:49:3E:12:47:39:11:A1:C4:45:29:BD:1F:E8:B6:6C:8D:79:AD:21:DD:73:E9:20:65:C0:EC:47"}}},"request":{"raw":"GET /api/sites/6/banner.html HTTP/1.1\r\nHost: githob.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bazienfj5285328.xyz/\r\nOrigin: https://bazienfj5285328.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wb%2BEl87IPBelpb9gIaZpDrciOrJXpTk4I5DlPZpSk%2Bdd4NaZKjxYiEWvS1MMjKkn%2FYjc%2BG6cxPng%2F1KGYym2FwStmQU3fA4i3w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Feb 2026 07:11:08 GMT\r\ncontent-disposition: attachment; filename=banner.html\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Sun, 22 Feb 2026 15:47:58 GMT\r\ncache-control: max-age=1080, public, max-age=1080\r\nx-cache-status: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d1f85a19fbd75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (315)","md5":"877ba323f20f3fb459df2f442b7da097","sha1":"57e2a0c201717179574dfb4bc7087d4b0f53e1de","sha256":"b27d4fc11bab0381fef240819d0be1298f3b6f77bd47ff58084cac98b5c5246b","sha512":"b036a48b974b79411c614065e5a178706c4be1812282883dfa341a855cd71db3e1f5ed5b32cb6c599356c96c42272a59eb05a85ad06063f96f3ab5acbaccbdee","ssdeep":"","tlshash":"33f059e7c2e4d9f10b07d34960d2b526da62b805b30a5d02e8b12b215a815874737e3e","first_seen":"2026-02-22T15:30:46.865147Z","last_seen":"2026-02-22T18:47:04.972912Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":59,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/css/normalize.css","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/css/normalize.css HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"59bed4d0-1f77\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4px6qfDJl7OC0Ctfj9HET0ABHfOuiTcmkqsBJJUsSPuilhIv7xmegPDfO5AQE4wdxWegYD0wHCVQg6hquTeZCKoFH4yFux1FlomUQ%2FUD4ytir2c%3D\"}]}\r\ncf-ray: 9d1f859c8f819a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8055,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"92280c3a0c4a4718cc555a7be4ed805e","sha1":"c8ddd1cde112051152d82a33b160451d82762977","sha256":"e961d8ed591735806680212519caa1c9c1e2a2416b39ad7aba21aeea9984eae5","sha512":"64c5cd81b13993446cd817369fcefdb7a044f91457d88f7b2c3b7780a29b57134691146def69337644fb8ab1d2767718505be30c214f2ef23eca7278a9340751","ssdeep":"96:B4bF+J4d8sa1DPp86KD2UhEg3p6tsoSoRdxh4CjttnBGeJxmngr7HaA1:Bt4d8BcEg5osoFh40BRKS7HH","tlshash":"64f162911320af2292a60c78376f978e7314012785783dddb8e262e4cf4979ad375bca","first_seen":"2023-07-02T16:26:43Z","last_seen":"2026-08-14T18:29:18.133097Z","times_seen":286,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"githob.co/api/sites/6/script.js?v=1","fqdn":"githob.co","domain":"githob.co","tld":"co"},"ip":{"addr":"172.67.211.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"githob.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 16:01:14 GMT","end":"Wed, 15 Apr 2026 16:59:58 GMT"},"fingerprint":{"sha1":"C9:2B:48:B6:2C:C3:9C:04:AE:E8:8B:86:AA:22:32:A0:E8:7B:1E:F1","sha256":"D6:14:0E:7F:8C:49:3E:12:47:39:11:A1:C4:45:29:BD:1F:E8:B6:6C:8D:79:AD:21:DD:73:E9:20:65:C0:EC:47"}}},"request":{"raw":"GET /api/sites/6/script.js?v=1 HTTP/1.1\r\nHost: githob.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: attachment; filename=script.js\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cache-status: HIT\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOgAqU04v78gJviMui9b0LPaS7DHlGqNC0W256tkhdp%2F1TXS6U342VVEwxp7orgH6WRGPjMz9JCiHTJyDx%2BGmz7d%2B%2B7GJpBWzA%3D%3D\"}]}\r\ncf-ray: 9d1f859d2afde9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26373,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (875)","md5":"ccd607d090590aee216c7a0f45d90257","sha1":"00bcf1ffa9680b221f99b31e34f770a7c2a5188c","sha256":"54e0070e58f8af4c091d8dc9686eebca9e7663ebf7000025f46a65fde43cf329","sha512":"57dcb724fe3fdde45aea77711764b567a9fc9a133446630ed3d3b793e5bd4678a005bb645778b30c0e02dcc92c99b494df22aef10513c8651f6acda47b0262c1","ssdeep":"768:WPz4drMw4yeT3o3RyonUQxX/yWOXf8xov8xmbdUgV4p2ylPmtbyMk+:O13o3RtnU0X/yNXf8ev8cbdUgmp2ylPG","tlshash":"ddc284827620053557df086f30b7b68cfb75558afd946840a8aec82d60f1ed250a7bbe","first_seen":"2026-02-22T15:30:46.866515Z","last_seen":"2026-02-22T18:47:04.949415Z","times_seen":2,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":60,"dns":56,"connect":9,"send":0,"wait":93,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjMxMS8xNzAxMjUyNzc5LTkxNjktNzY2Ni5qcGdANjRhODI0YWFkNjkzZDRiOWVlZjAxNGExNmFjZWViZmQ%3D","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjMxMS8xNzAxMjUyNzc5LTkxNjktNzY2Ni5qcGdANjRhODI0YWFkNjkzZDRiOWVlZjAxNGExNmFjZWViZmQ%3D HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/jpeg\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nset-cookie: referer=https%3A%2F%2Fbazienfj5285328.xyz%2F; expires=Mon, 23-Feb-2026 15:29:57 GMT; Max-Age=86400; path=/\r\nexpires: Tue, 24 Mar 2026 15:29:57 GMT\r\npragma: cache\r\ncache-control: max-age=2592000\r\nvia: 1.1 google\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2747nVx%2BduMvEH7U5YhA58X7YROSUlZ5mJHizNnXygvb7Xkeyqi9l6fxqWtilqWRjdQJ%2B2vX0DmnevgoA3ApWQsx8CBz3i1iOjy%2BRBHhUdI%2BAI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d1f859caf9a9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":70837,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 700x350, components 3","md5":"175932bbab77ce0e02f49b24f15f092c","sha1":"e1c6627d8efcb34d1bf4a0408b9ef8826ed7fa91","sha256":"5b533972090b7cc7d1bcb03d15346ee24af3f7a3116566e3c5f9222cc112560c","sha512":"594ea33f27cd446acd41b6d7285e90bf73e6ec8662e946ddc0dda4ec34937943ed5403cba5367e5e1a499e250e970a9695b08ca9a28951b2c02914f97fc9f786","ssdeep":"1536:5JXmvG4dfmM0WOweah0kTMdDES8kShsCaVLhe+IZ:XXU/9OicJESjSsV1AZ","tlshash":"9d6302ee3f472c41c0e0e8ff861647935a63e8ad557b148c2e05a0959a31a1fbf13d87","first_seen":"2024-08-19T21:02:23.700118Z","last_seen":"2026-02-22T18:47:04.963759Z","times_seen":5,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/api/V1L3Nwb3J0L2RhdGEvbGFuZ3VhZ2U%3D","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /api/V1L3Nwb3J0L2RhdGEvbGFuZ3VhZ2U%3D HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: text/json; charset=utf-8\r\ncache-control: no-cache, must-revalidate\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nvia: 1.1 google\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BDXy6T21FAPG5Kar5yo863dZ08SCEs4NwpxaEAmbKBEH3PERavfPUsvCYV6NWVI1PJ7Js5%2Forqk6RuqvGMBNbw46RIAa8ujO9RFkLlk1YkQeuY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d1f859f38389a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1358,"size_decoded":0,"mime_type":"text/json; charset=utf-8","magic":"JSON text data","md5":"b9cda4e713bec3d4c1fcf08fa77ea098","sha1":"3eadf1306b79786d49bf908ca425e69ef5e25ba2","sha256":"4a7a6d1f0262cc9f07e41431a64529b330d7a58ff20dc05d3b551cc7e1f4787d","sha512":"871bee7a65631baf70a3b948989715bb6672cc5c121db3fa90796d523e1be200051568b45b0e8e131d9a82efe63e59dca2bb06de93d6d17d043b8d50d66a0974","ssdeep":"","tlshash":"21211ddb7b2d6a9f202de9428c7adbcc48ca2cc0901768389b398344d6a4280ddbd753","first_seen":"2023-05-29T03:20:16Z","last_seen":"2026-08-14T18:29:18.115664Z","times_seen":241,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjMxMS8xNzAxMjUyNjA3LTMxOTItNTUyNy5wbmdAODkyMWQzZmRlMzFhNjdlZWE4OGRjN2RmNmFjODBmYTM%3D","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /image/aHR0cDovL2NsMzRmaWxlcy5zMy5ldS1jZW50cmFsLTEuYW1hem9uYXdzLmNvbS9iYW5uZXJzLzIwMjMxMS8xNzAxMjUyNjA3LTMxOTItNTUyNy5wbmdAODkyMWQzZmRlMzFhNjdlZWE4OGRjN2RmNmFjODBmYTM%3D HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596; referer=https%3A%2F%2Fbazienfj5285328.xyz%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=0\r\nx-robots-tag: noindex\r\nexpires: Tue, 24 Mar 2026 15:29:57 GMT\r\npragma: cache\r\ncache-control: max-age=2592000\r\nvia: 1.1 google\r\ncontent-length: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brJiqS55343kbJSthDgF1v%2BlBFqKibM%2FWqLjIkiHY2z8Rn3WICkNXQn5D8Dn8mR31C3IsMV0km5b8cKEX6xYGKB6rQRh3KP7f6o5O%2FXH%2B1roBy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d1f85a0b8929a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazienfj5285328.xyz/candy/assets/js/jquery.js","fqdn":"bazienfj5285328.xyz","domain":"bazienfj5285328.xyz","tld":"xyz"},"ip":{"addr":"104.21.81.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bazienfj5285328.xyz/","date":"2026-02-22T15:29:57.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazienfj5285328.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:25:15 GMT","end":"Tue, 05 May 2026 15:24:04 GMT"},"fingerprint":{"sha1":"22:C3:F0:BE:05:33:BD:B6:5F:A9:78:26:85:32:D6:C8:C2:5B:A3:9D","sha256":"53:4D:8F:BA:DC:EB:ED:AF:28:0F:2D:25:33:BE:B7:97:6E:79:FA:91:A2:64:3E:DB:79:F9:5E:9B:0F:8C:EE:12"}}},"request":{"raw":"GET /candy/assets/js/jquery.js HTTP/1.1\r\nHost: bazienfj5285328.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bazienfj5285328.xyz/\r\nCookie: lstvs=1771860596\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Feb 2026 15:29:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 Sep 2017 20:02:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Feb 2027 15:29:57 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ncf-cache-status: MISS\r\netag: W/\"59bed4d0-15244\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2jvmAsFkUlN3c6EVZCh5GoSzcrt0ZJUTVZeDl%2FPABOvwIeDBfl0ncOjc%2BCrXcpr4kdK8Fk29QrLJ%2F8ABkcLPWvlFNkzPlUgO7Jzshz9XE%2B1MHE%3D\"}]}\r\ncf-ray: 9d1f859c9f889a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":86596,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"d4162c9d7e520a5de05001be6e741899","sha1":"0baf29230047c9cd896f14c59618c9948ea79451","sha256":"2405bdf4c255a4904671bcc4b97938033d39b3f5f20dd068985a8d94cde273e2","sha512":"b2e52d48f92a62615de4bb37d0dcfa6e30d7f9309c7c4ce115faa38a37dd820b1a159a3296f4e3fb6a1d073b21b344c2c18ad866141e0a01e024492771bd9855","ssdeep":"1536:+NhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4cAj2ll/ckaXEy6n15HZ+FhFcQDs:Axc2yjxAj2QA/kcQDU8Cuu","tlshash":"f883e6d9b2c670629b7730b850bf410bb17a98dab44c8c60f158d9d47db8a8d907bf2c","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-08-19T19:21:00.868909Z","times_seen":2649,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}